Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
File:                     065ac7bb-bf21-3a5a-847d-e97aa48db175.roa (raw, json)
Hash identifier:          sNWidQQMTgapfAigIGbsJ+gct2a4YT4aPAbsRZf+ixc=
Subject key identifier:   8B:86:66:D7:FE:27:36:83:DB:2C:BC:C8:2E:B1:D0:03:BF:11:1C:EF
Certificate issuer:       /CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
Certificate serial:       010D0C9F4328584E296F00F315DFCD626DA6FB80
Authority key identifier: 46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     13427
IP address blocks:        137.83.103.0/24 maxlen: 24
                          173.243.64.0/20 maxlen: 20
                          192.96.17.0/24 maxlen: 24
                          192.156.255.0/24 maxlen: 24
                          198.153.60.0/22 maxlen: 22
                          2604:8d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:00:f3:15:df:cd:62:6d:a6:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=c69c929e-02df-43f9-b8ed-b476bb3e8073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:44:83:a5:13:da:c6:d2:04:32:01:ea:a2:c4:
                    95:21:f3:41:b7:fc:2a:8c:73:4b:7a:18:00:fa:9d:
                    c8:c6:39:c4:5f:a2:a2:f5:27:8f:4b:03:d7:d3:4e:
                    2d:c0:b6:7c:5c:c2:05:87:32:5b:1b:17:47:5f:31:
                    85:85:05:7c:0b:fb:f3:57:23:46:c4:4a:9f:8f:74:
                    13:5e:77:6f:3f:f3:72:d7:6c:04:ae:fc:f9:1f:8a:
                    bd:38:b9:dd:e4:e0:6e:f0:4e:49:0a:c4:a9:f7:57:
                    99:07:7a:cb:13:1c:85:a8:34:66:6a:86:94:16:a7:
                    35:47:b9:52:ec:48:7b:9a:9d:6b:3b:d6:1b:7f:2a:
                    9e:20:8d:43:51:0d:b4:ab:da:48:0a:f8:fc:a5:cc:
                    c7:c7:15:b1:b1:00:7e:46:3c:6e:20:36:40:cd:fa:
                    c4:8a:6c:94:f1:a4:d1:a0:be:db:d8:20:5b:34:2d:
                    5f:2d:01:e5:de:0c:e8:bb:70:54:95:27:0b:d4:69:
                    52:33:f3:ed:9d:ef:e7:c0:85:d0:05:cb:b8:82:60:
                    ce:33:e7:4b:83:61:42:a0:fc:22:c6:47:a9:38:1b:
                    ee:38:65:e2:d1:78:d2:6f:0c:e1:1d:57:54:4d:b8:
                    e3:d4:00:95:e8:fc:08:2c:8a:d8:47:e0:73:cf:fc:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:86:66:D7:FE:27:36:83:DB:2C:BC:C8:2E:B1:D0:03:BF:11:1C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl

            X509v3 Authority Key Identifier:
                keyid:46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.103.0/24
                  173.243.64.0/20
                  192.96.17.0/24
                  192.156.255.0/24
                  198.153.60.0/22
                IPv6:
                  2604:8d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:6c:c9:18:33:9b:2a:18:c1:aa:18:36:be:e0:b4:f0:f0:
         54:8e:13:cf:5e:cf:e6:ec:92:0d:69:dd:2e:e3:f3:d4:18:10:
         e8:45:e7:6c:59:33:dd:88:06:19:cd:7d:cf:ed:8e:85:eb:e0:
         c2:0e:39:2f:ce:87:1d:c5:b9:1f:2b:67:7f:a8:a5:ea:5e:6e:
         03:de:b6:d6:60:fb:d8:36:45:ec:1f:02:e8:d8:5b:c1:9c:c8:
         17:24:e2:24:f0:3a:d0:55:9c:cf:58:86:96:57:7b:6c:62:71:
         30:84:06:55:12:38:1f:12:98:d8:df:f2:7c:c4:19:23:8b:a7:
         6b:db:8e:75:88:1a:29:44:68:2c:41:b3:19:91:4d:20:d1:b0:
         ff:a8:b5:2e:f5:49:d1:21:6e:54:e4:6a:d0:92:37:6f:72:89:
         6b:b0:f9:5f:d7:4d:72:ef:95:99:76:25:50:bd:08:f1:33:48:
         2e:8e:f6:f1:ba:cf:1b:21:05:42:26:ac:f9:b8:a7:6e:28:66:
         e0:0f:92:31:83:54:95:d3:c4:5c:b2:94:58:e1:d3:20:5e:4a:
         66:77:f6:ba:66:ca:79:c3:28:82:a2:c7:97:fe:7f:60:e5:c8:
         73:9c:50:fb:88:00:50:7b:b3:30:b6:a3:49:e5:aa:e5:ee:45:
         e7:e0:27:e0
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE4pbwDzFd/NYm2m+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWJmYmM0NmYtM2M0OC00NDA2LWJhOGMtYTQyM2I5MDZh
NjNlMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
YzY5YzkyOWUtMDJkZi00M2Y5LWI4ZWQtYjQ3NmJiM2U4MDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0SDpRPaxtIEMgHqosSVIfNBt/wqjHNLehgA
+p3IxjnEX6Ki9SePSwPX004twLZ8XMIFhzJbGxdHXzGFhQV8C/vzVyNGxEqfj3QT
XndvP/Ny12wErvz5H4q9OLnd5OBu8E5JCsSp91eZB3rLExyFqDRmaoaUFqc1R7lS
7Eh7mp1rO9YbfyqeII1DUQ20q9pICvj8pczHxxWxsQB+RjxuIDZAzfrEimyU8aTR
oL7b2CBbNC1fLQHl3gzou3BUlScL1GlSM/Ptne/nwIXQBcu4gmDOM+dLg2FCoPwi
xkepOBvuOGXi0XjSbwzhHVdUTbjj1ACV6PwILIrYR+Bzz/xmnQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFIuGZtf+JzaD2yy8yC6x0AO/ERzvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmZi
YzQ2Zi0zYzQ4LTQ0MDYtYmE4Yy1hNDIzYjkwNmE2M2UvMDY1YWM3YmItYmYyMS0z
YTVhLTg0N2QtZTk3YWE0OGRiMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWJmYmM0NmYtM2M0OC00NDA2LWJh
OGMtYTQyM2I5MDZhNjNlLzFiZmJjNDZmLTNjNDgtNDQwNi1iYThjLWE0MjNiOTA2
YTYzZS5jcmwwHwYDVR0jBBgwFoAURl0DE2ecs/isaUKhfJu3hkrb9skwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmZiYzQ2Zi0zYzQ4LTQ0MDYtYmE4Yy1hNDIz
YjkwNmE2M2UuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAiVNnAwQE
rfNAAwQAwGARAwQAwJz/AwQCxpk8MA0EAgACMAcDBQAmBI2AMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGUq
bMkYM5sqGMGqGDa+4LTw8FSOE89ez+bskg1p3S7j89QYEOhF52xZM92IBhnNfc/t
joXr4MIOOS/Ohx3FuR8rZ3+opepebgPettZg+9g2RewfAujYW8GcyBck4iTwOtBV
nM9YhpZXe2xicTCEBlUSOB8SmNjf8nzEGSOLp2vbjnWIGilEaCxBsxmRTSDRsP+o
tS71SdEhblTkatCSN29yiWuw+V/XTXLvlZl2JVC9CPEzSC6O9vG6zxshBUImrPm4
p24oZuAPkjGDVJXTxFyylFjh0yBeSmZ39rpmynnDKIKix5f+f2DlyHOcUPuIAFB7
szC2o0nlquXuRefgJ+A=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:57:27 2026 by rpki-client